2026-09-08 17:12 UTC
@Xavier@infosec.exchange When a website interrupts the login flow when I'm trying to access a specific thing to ask where it can save this passkey it helpfully generated, the answer is always "go fuck yourself".
Especially if it's already made me stop and get my phone or open my email when I've already got a perfectly good password that it now won't accept.
Replies (1)
-
@Xavier@infosec.exchange 2026-09-08 17:46
@drsbaitso@infosec.exchange And this is more important than having phishing resistant authentication? The reason I ask is that I'm a security engineer tasked with helping protect accounts like yours. What situation would you start using passkeys?